FAQ

How do I get Readability / Readability Redux to work after installing NotScripts?

Whitelist Readability in NotScripts

Whitelist Readability in NotScripts

Readability Redux and regular Readability for Google Chrome inject an external javascript file into the page when you click on it’s button so NotScripts is doing it’s job by blocking it by default. However, you can whitelist these type of extensions in NotScripts by first going to something like http://www.google.com and then click the Readability button. After, click on the NotScripts icon for the drop down menu and you should see an option to whitelist something jumbled like

jggheggpdocamneaacmfoipeehedigia

or

mopngoefggcibgpnefgiojkehfmdfcjn

This should be the extension id of Readability or the extension you are trying to allow access. Whitelist it and from now on, Readability will work on all sites that you also allow javascript on.

How to Tell NotScripts to Not Block Plugins/Scripts/IFrames

In NotScripts V0.9.1+, if you want to get NotScripts to not block plugins, paste the following two lines into the end of your CHANGE__PASSWORD__HERE.js file:

const DO_NOT_BLOCK_EMBEDS = true;
const DO_NOT_BLOCK_OBJECTS = true;

This could be useful if Google Chrome 7 gets click-to-load built in for plugins and you want to use that instead. Additionally, the following two lines will disable NotScripts from blocking iframes and scripts, respectively:

const DO_NOT_BLOCK_IFRAMES = true;
const DO_NOT_BLOCK_SCRIPTS = true;

I post these last two lines here for reference only since including them into your password file will completely defeat the purpose of NotScripts.

If You Experience Site Compatibility Problems After Upgrading to NotScripts V0.9.5

If you experience site compatibility problems or dialog boxes pop up asking if you want to leave a site after upgrading to NotScripts V0.9.5, try putting the following line into your NotScripts CHANGE__PASSWORD__HERE.js file:

const DO_NOT_MITIGATE_INLINE_SCRIPTS = true;

Inline script mitigation was introduced in NotScripts V0.9.5 and there appears to be some users that have an issue using it but the root cause of these problems is not yet known. Turning off inline script mitigation decreases security somewhat because you won’t have the benefit of mitigating inline scripts. However, inline script mitigation is intended to be temporary until Google Chrome properly fires before load events for inline scripts.

How to Get StumbleUpon.com to Work with NotScripts

Whitelist StumbleUpon

Whitelist StumbleUpon

Go to http://www.stumbleupon.com/ and ensure that you have whitelisted stumbleupon.com, stumble-upon.com, and googleapis.com as shown in the screenshot above.

How to Get the StumbleUpon Google Chrome Extension to Work with NotScripts

The StumbleUpon extension for Google Chrome injects an iframe into the page you stumble to along with injecting some javascript to load StumbleUpon content. This is not a good practice from a security point of view but there is a way you get the the StumbleUpon extension to work at a cost of decreased security. Try putting the following line into your NotScripts CHANGE__PASSWORD__HERE.js file:

const DO_NOT_BLOCK_IFRAMES = true;
const DO_NOT_MITIGATE_INLINE_SCRIPTS = true;

After you restart your browser or disable and then re-enable NotScripts, the StumbleUpon extension will work as expected. Note that I do not like the way the StumbleUpon extension works and I HIGHLY RECOMMEND you use the StumbleUpon.com website instead.

Get the Cleeki Extension to Work with NotScripts

Whitelist Cleeki.com in NotScripts

Whitelist Cleeki.com in NotScripts

To get the Cleeki extension for Google Chrome to work with NotScripts, you need to whitelist cleeki.com in NotScripts because the Cleeki extension injects iframes and javascript from cleeki.com into the page you use it on. To add it to your NotScripts whitelist, visit the Cleeki extension configuration page at http://www.cleeki.com/php/cleekiconfig.php?ver=1 and then allow cleeki.com as shown in the screenshot above.

Note that to use Cleeki on a web page, that web page must also be set to allowed in NotScripts. For example, if you want to use Cleeki on digg.com, then digg.com must also be in the NotScripts whitelist. This is because Cleeki injects javascript/iframes directly into the page and expects to have full access to the scripting.

Get the Amplify Extension to Work with NotScripts

Whitelist Amplify.com in NotScripts

Whitelist Amplify.com in NotScripts

To get the Amplify extension for Google Chrome to work with NotScripts, you need to whitelist amplify.com in NotScripts because the Amplify extension injects iframes and javascript from amplify.com into the page you use it on. To add it to your NotScripts whitelist, visit the Amplify install page at http://amplify.com/install/installed.html and then allow amplify.com as shown in the screenshot above.

Note that to use Amplify on a web page, that web page must also be set to allowed in NotScripts. For example, if you want to use Amplify on digg.com, then digg.com must also be in the NotScripts whitelist. This is because Amplify injects javascript/iframes directly into the page and expects to have full access to the scripting.

I’m Seeing Frequent Page Reloads and I Always Clear my Cookies/HTML5 Storage After Each Use

Please note that NotScripts requires the use of the HTML5 storage in Google Chrome. If you set Google Chrome to delete your cookies/HTML5 storage after every browser exit, NotScripts will not be able to effectively cache the site specific permissions and you will see frequent reloads. The default setup of Google Chrome works fine with NotScripts.

How do I get NotScripts to work in Sandboxie?

Tip from NotScripts user Arvind Chari: “FYI for anyone who is using this with sandboxie, installing the same extension once within the sandbox (and once outside the sandbox) solves any issues you might have once you run this browser sandboxed.”

More FAQs to be posted….

26 Comments »

  • Optimal Cycling Project » Blog Archive » Frequently Asked Questions for NotScripts said:

    [...] NotScripts and troubleshooting site/extension compatibility problems. You can go to it directly at http://optimalcycling.com/other-projects/notscripts/faq/ or you can also reach it from the NotScripts [...]

  • anonymous said:

    It would also be interesting if/how it is possible to allow not only Readability but also Readable to be executed.

  • ericwong (author) said:

    @anonymous, to get Readability extension to work with NotScripts, you will need to add the Readability extension id to the NotScripts whitelist:
    http://optimalcycling.com/other-projects/notscripts/faq/#readability

    For Readable, you will need to add

    appspot.com

    into the NotScripts whitelist. Also, you must allow the page you are viewing to run scripts since Readable injects javascript into it. You can do this by temporarily allowing the page, or you can try the new whitelist with top level sites allowed by default mode that should make things easier for you: http://optimalcycling.com/2010/09/06/blacklist-mode-implemented-for-notscripts-v0-9-6/

  • anonymous said:

    Thank you very much for your help, this worked well. Keep up the good work. :)

  • Eugene said:

    I just noticed there are two unchecked boxes for NoScript on my Extensions page: one is to allow incognito mode and the other is to grant access to file URLs.

    Should I check them both, and what will be the effect?

  • Eugene said:

    Also, I put in the line

    const DO_NOT_BLOCK_IFRAMES = true;

    as my Avira anti-virus software blocks I-Frames selectively.

    Can you please confirm that is okay?

  • Martin said:

    Hello,

    I have changed the blocking mode to whitelist with top level sites allowed. Now, all sites are set to “same”. What does that mean? I only wanted to enable script to top-level sites and not scripts from third parties. I am not sure if this change may have by accident whitelisted all scripts.

  • ericwong (author) said:

    @Martin
    Hello, “Same” is what you want going by your description. When a url is set to “Same”, the scripts from it will only be allowed to run if it is the same address as the webpage you are on. For example, setting “Example.com” to same would forbid it from running on “Banking.com”, but allow scripts to run from it when you are on something like http://www.example.com/somepage.html

  • msund said:

    I’m looking to whitelist a block of IP addresses and can’t seem to find any information on how to do it. Anyone know if this is supported and how to accomplish this? I work with equipment on a private IP subnet and I’d like to just whitelist the whole range. For example the 192.168.0.0/24 subnet.

  • Meins said:

    How can i set NotScipts to default “allow” all scripts?

    Or at least those who are embedded inside the webpage?
    It feels like it blocks just everything ( which comes close to use a browser where i could block all of them ) and thus i loose very much functionality…

    would be nice if default is “allow” and i could set scripts to disallow

  • laos said:

    if i load a page, i see the blocked stuff if i click the pyramid smybol… BUT when i click allow it doesnt disappear from the list and the site doesnt reload either :(

  • What is your favorite browser? - Political Forum said:

    [...] Posted by dreadpiratejaymo Did you try NotScripts? I actually considerd this until I came to this page: [...]

  • andisheh said:

    I installed it and after that http://www.facebook.com couldn’t open. I disabled it and it opened. Now I don’t know what to do to enable it and it can open facebook too.

  • Lisa Schmidt said:

    I am one of the true “Dummies”, so I need more info. I don’t even know how to access the files or folders needed to set a password. Where is the extension folder? How do I paste that code for Windows XP into a folder location bar? If I can’t do it, how do I opt out or unsubscribe? I desperately need to work on Microsoft word and now it won’t load! Help me ASAP!!!! (please?????)

  • Matt said:

    I may be missing something here, but how do I block scripts on a per domain basis?
    For example, I block all scripts from ‘gstatic.com’ when I’m using Google Reader (it stops the Google+ integration and actually speeds up Google Reader immensely!).
    But when I load up Adsense for example, it needs ‘gstatic.com’ to operate correctly, and when I enable it, it enables globally and reloads my Google Reader tab complete with scripts from ‘gstatic.com’.
    How do I block scripts on a per domain basis?

  • Dang said:

    @Matt
    From what I can tell about the way Notscript works I don’t think it can do what you require. NoScript for Firefox works pretty much the same way. If you unblock scripts for a domain, you unblock it for all open tabs, even one in new windows. So you can’t have the same scripts blocked in one page while enabled in another.

    Great work on this Eric works like a charm. I’d suggest you put the explanation on what the “Same” button does as I was trawling all over the site looking for an explanation on what it was!

  • John said:

    Hello,

    I have had a strange script/object/something listed for every page I go to in Chrome. It is just a series of random letters. It is disabled for every page, but I’d like to find out what it is and probably just get rid of it. Here is the first part of it: lifbcibllh. Anyone have any suggestions as to what this is?

    Thanks,
    -John

  • Jan said:

    Hi,

    I accidentally blocked a whole website. Looked in Options but is there an edit or undo option?

    Thanks for the great extension!
    Jan

  • Jan said:

    Nevermind, AdBlock+ Element Hiding Helper is blocking the whole page, not NotScripts.

  • B Gold said:

    Notscript not working for me in 32bit Win8.
    Yes I set password and it is retained in the js file.

    Worked fine in Win 7.

    ???

  • Mike said:

    Hi, I have the problem that the action button keeps disappearing. It’s set to be there, but when I go to a new page, it usually isn’t; I have to restart Chrome and then it show up.

  • Diane Zanotti said:

    Please advise how I can get my hotmail to work with not scripts.

  • Me said:

    My Commodore 64 won’t run Chrome, and it doesn’t seem to run notscript either.

    Can you fly out and meet me at my place next Monday at 6AM to fix it?

    I’d really appreciate it; I just can’t understand why it doesn’t work. Oh, and bring a power cord as mine is frayed and shorts out a lot. Picking up breakfast on the way over would be nice too while you’re at it.

    Thanks!

  • Fatih M. KILIÇ said:

    Hello, I was using firefox. So, I was using NoScript. Therefore, many web pages has allowed/blocked NoScript options file.

    How I can this file migrate to NotScript?

  • B.S. said:

    Thank you for NoScripts

    Two suggestions, if I may:

    (Pretty!) please, allow blocking by subdomain. e.g. I would like to block plus.google.com, but not google.com or sites.google.com

    And, I occasionally get “Otherwise, please clear/enable the browser HTML5 storage.” (Win 7, Chrome 25.0.1364.172 m) – but I don’t know / see how to enable or increase the browser storage. Could the FAQ (http://optimalcycling.com/other-projects/notscripts/faq/) not only address this clearing, but also the opposite – increasing the storage?

    Thanks again.

  • The Jetman said:

    I could get into using NotScript even after reading the FAQ and in spite of the admitted limitations (relative to Chrome’s “imperfections”) of the plugin. However, I can’t find any indication that NotScript can import NoScript’s whitelist.

    Even if NotScript can’t currently implement all of NoScript’s features, it would be an enormous boon if NotScript could at least import most of NoScript’s settings, so one doesn’t have to start all over building that “database” of trusted sites.

    Just my $0.02….

Leave your response!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.